Systems and methods for measuring cyber based risks in an enterprise organization

A system comprising:

• a first database comprising a plurality of records of a first type each comprising a computer identifier and a vulnerability data associated with the computer identifier;
• a second database comprising a plurality of records of a second type each comprising a user identifier and the computer identifier, wherein the user identifier is associated with a user authorized to access a computer associated with the computer identifier;
• a third database comprising a plurality of records of a third type each comprising the user identifier and an associated organizational indication wherein the user identifier represents a name of a person within an organization associated with the organizational identifier;
• a processor adapted to retrieve the plurality of records of the first, second and third types, merging the records to produce a record of a fourth type;
• and
• a fourth database comprising a plurality of records of the fourth type, wherein each record of the fourth type comprises a first field indicating an organizational indication and a second field comprising an aggregate vulnerability indication, wherein the aggregate vulnerability indication comprises a total number of vulnerabilities associated with the organizational indication determined by the processor executing program instructions to:
• identify matching records of the third type having an associated organizational indication matching the organizational indication.
• extract matching user identifiers from the matching records of the third type,
• identify matching records of the second type having user identifiers matching the matching user identifiers,
• extract matching computer identifiers from the matching records of the second type;
• identify matching records of the first type having computer identifiers matching the matching computer identifiers,
• extract matching vulnerability data from the matching records of the first type, and
• sum the total number vulnerability from the matching vulnerability data.

A non-transitory computer readable medium comprising program instructions for causing a processor to:

• retrieve a plurality of first records wherein each first record comprises a computer identifier and a vulnerability data associated with the computer identifier;
• retrieve a plurality of second records wherein each second record comprises a user identifier and the computer identifier, wherein the user identifier is associated with a user authorized to access a computer associated with the computer identifier;
• retrieve a plurality of third records wherein each third record comprises the user identifier and an associated organizational indication wherein the user identifier represents a name of a person within an organization associated with the organizational indication;
• and
• produce a plurality of fourth records by merging the plurality of first records, the plurality of second records, and the plurality of third records wherein each fourth record comprises an organizational indication and an aggregate vulnerability indication based on associated vulnerability data, wherein the aggregate vulnerability indication comprises a total number of vulnerabilities associated with the organizational indication determined by the processor executing further program instructions to:
• identify matching third records having an associated organizational indication matching the organizational indication,
• extract matching user identifiers from the matching third records,
• identify matching second records having user identifiers matching the matching user identifiers,
• extract matching computer identifiers from the matching second records;
• identify matching first records having computer identifiers matching the matching computer identifiers,
• extract matching vulnerability data from the matching first records, and
• sum total number of vulnerabilities from the matching vulnerability data.